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CLAIMS 

What is claimed is: 



1 1 . A method for prioritizing virus scan requests comprising: 

2 checking a virus scan request to determine if scanning an object of the request is 

3 necessary; and 

4 placing the virus scan request on a queue in a priority order based on a characteristic of 

5 the virus scan request. 

1 2. The method of claim 1 , further comprising: 

selecting a one of the virus scan requests from the queue. 

|y 3 . The method of claim 2, wherein selecting is based on the priority order. 



W 4. The method of claim 2, wherein selecting is based on the characteristic of the virus scan 

t3 request. 

1 5. The method of claim 2, further comprising: 

2 scanning the object of the selected virus scan request. 

1 6. The method of claim 2, wherein the characteristic includes at least one of an identity of 

2 the user triggering the virus scan request, a type of the process accessing the object of the virus 

3 scan request, a file extension of the object of the virus scan request, a time stamp of when the 
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virus scan request was received, and an indication of whether the object is being accessed from a 
server console or from a network client. 



7. The method of claim 1 , wherein the priority order is further based on comparing the 
characteristic of the virus scan request with the characteristics of the virus scan requests 
previously placed on the queue. 

8. The method of claim 7, wherein the priority order is further based on a parameter 
indicating which of the compared characteristics is given higher priority. 

9. The method of claim 4, wherein selecting is further based on comparing the 
characteristics of the virus scan requests placed in the queue. 

10. The method of claim 9, wherein selecting is further based on comparing the 
characteristics of the virus scan requests placed in the queue with the characteristics of the 
previously selected virus scan requests whose objects are currently being scanned. 

11. The method of claim 10, wherein selecting is further based on a parameter indicating 
which of the compared characteristics is given higher priority. 

12. The method of claim 6, wherein the user identity of the selected scan request is an 
administrator as compared to a regular user. 
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13. The method of claim 6, wherein the process type of the selected scan request is an 
operating system as compared to a user application. 

14. The method of claim 6, wherein the file extension of the selected scan request is an 
executable file as compared to a data file. 

15. The method of claim 6, wherein the time stamp of the selected virus scan request is 
earlier as compared to the time stamps of each of the checked virus scan requests previously 
placed on the queue. 

16. The method of claim 6, wherein the indication of the selected virus scan request is that 
the object of the request is being accessed from a server console as compared to a network client. 

17. The method of claim 1, wherein scanning is necessary when a virus scan status indicates 
the object is not known to be virus free. 

18. The method of claim 1, wherein scanning is necessary when the object of the virus scan 
request is in a directory not excluded from virus scanning. 

19. An apparatus comprising: 

a machine-accessible medium having stored thereon executable instructions to cause a 
computer to perform 

checking a virus scan request to determine if scanning is necessary; and 
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placing the virus scan request on a queue in a priority order based on a characteristic of 
the virus scan request. 

20. The apparatus of claim 19, further comprising instructions for selecting a one of the virus 
scan requests from the queue. 

21. The apparatus of claim 20, wherein the instructions for selecting is based on the priority 
order. 

22. The apparatus of claim 20, wherein the instructions for selecting is based on the 
characteristic of the virus scan request. 

23. The apparatus of claim 20, further comprising instructions for scanning the object of the 
selected virus scan request. 

24. The apparatus of claim 20, wherein the characteristic includes at least one of an identity 
of the user triggering the virus scan request, a type of the process accessing the object of the 
virus scan request, a file extension of the object of the virus scan request, a time stamp of when 
the virus scan request was received, and an indication of whether the object is being accessed 
from a server console or from a network client. 
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25. The apparatus of claim 20, wherein the instructions for placing the virus scan request on 
the queue in the priority order are further based on comparing the characteristic of the virus scan 
request with the characteristics of the virus scan requests previously placed on the queue. 

26. The apparatus of claim 25, wherein the instructions for placing the virus scan request on 
the queue in the priority order are further based on a parameter indicating which of the compared 
characteristics is given higher priority. 

27. The apparatus of claim 20, wherein the instructions for selecting are further based on 
comparing the characteristics of the virus scan requests placed in the queue. 

28. The apparatus of claim 27, wherein the instructions for selecting are further based on 
comparing the characteristics of the virus scan requests placed in the queue with the 
characteristics of the previously selected virus scan requests whose objects are currently being 
scanned. 

29. The apparatus of claim 27, wherein the instructions for selecting are further based on a 
parameter indicating which of the compared characteristics is given higher priority. 

30. The apparatus of claim 24, wherein the instructions for selecting cause the apparatus to 
select the virus scan request having a user identity of an administrator as compared to a regular 
user. 
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31. The apparatus of claim 24, wherein the instructions for selecting cause the apparatus to 
select the virus scan request having a process type of an operating system as compared to a user 
application. 

32. The apparatus of claim 24, wherein the instructions for selecting cause the apparatus to 
select the virus scan request having a file extension of an executable file as compared to a data 
file. 

33. The apparatus of claim 24, wherein the instructions for selecting cause the apparatus to 
select the virus scan request having an earlier time stamp as compared to the time stamps of each 
of the checked virus scan requests previously placed on the queue. 

34. The apparatus of claim 24, wherein the instructions for selecting cause the apparatus to 
select the virus scan request having an indication that the object of the request is being accessed 
from a server console as compared to a network client. 

35. The apparatus of claim 19, wherein the instructions for checking to determine if scanning 
is necessary include determining when a virus scan status indicates the object is not known to be 
virus free. 
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1 36. The apparatus of claim 19, wherein the instructions for checking to determine if scanning 

2 is necessary include determining when the object of the virus scan request is in a directory not 

3 excluded from virus scanning. 

1 37. A virus scanner comprising: 

2 a pre-processor thread that checks a virus scan request to determine if scanning an object 

3 of the request is necessary; 

4 a queue that receives the virus scan request in a priority order based on a characteristic of 

5 the virus scan request. 

"j? 38. The virus scanner of claim 37, further comprising: 

VQ 

si's s 

5 Sjj a scanner thread that selects a one of the virus scan requests from the queue. 

J 39. The virus scanner of claim 38, wherein the selection is based on the priority order. 

I , ' K 

ftp 40. The virus scanner of claim 38, wherein the selection is based on the characteristic of the 

fc K virus scan request. 

1 41 . The virus scanner of claim 38, wherein the scanner thread further scans the object of the 

2 selected virus scan request. 
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42. The virus scanner of claim 38, wherein the characteristic includes at least one of an 
identity of the user triggering the virus scan request, a type of the process accessing the object of 
the virus scan request, a file extension of the object of the virus scan request, a time stamp of 
when the virus scan request was received, and an indication of whether the object is being 
accessed from a server console or from a network client. 

43. The virus scanner of claim 37, wherein the priority order is further based on comparing 
the characteristic of the virus scan request with the characteristics of the virus scan requests 
previously placed on the queue. 

44. The virus scanner of claim 43, wherein the priority order is further based on a parameter 
indicating which of the compared characteristics is given higher priority. 

45. The virus scanner of claim 40, wherein the selection is further based on comparing the 
characteristics of the virus scan requests placed in the queue. 

46. The virus scanner of claim 45, wherein the selection is further based on comparing the 
characteristics of the virus scan requests placed in the queue with the characteristics of the 
previously selected virus scan requests whose objects are currently being scanned. 

47. The virus scanner of claim 46, wherein the selection is further based on a parameter 
indicating which of the compared characteristics is given higher priority. 
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48. The virus scanner of claim 42, wherein the user identity of the selected scan request is an 
administrator as compared to a regular user. 

49. The virus scanner of claim 42, wherein the process type of the selected scan request is an 
operating system as compared to a user application. 

50. The virus scanner of claim 42, wherein the file extension of the selected scan request is 
an executable file as compared to a data file. 

51 . The virus scanner of claim 42, wherein the time stamp of the selected scan request is 
earlier as compared to the time stamps of each of the checked virus scan requests previously 
placed on the queue. 

52. The virus scanner of claim 42, wherein the indication of the selected virus scan request is 
that the object of the request is being accessed from a server console as compared to a network 
client. 

53. The virus scanner of claim 37, wherein determining that scanning is necessary includes 
determining when a virus scan status indicates the object is not known to be virus free. 
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54. The virus scanner of claim 37, wherein determining that scanning is necessary includes 
determining when the object of the virus scan request is in a directory not excluded from virus 
scanning. 

55. A computer system comprising: 

a processor coupled to a system bus; 

a memory coupled to the processor through the system bus; 

a machine-accessible medium coupled to the processor through the system bus; 

a virus scanning process executed from the machine-accessible medium by the processor, 
wherein the virus scanning process causes the processor to check a virus scanning request to 
determine if scanning an object of the request is necessary, and if so to further place the checked 
virus scan request on a queue in a priority order based on a characteristic of the virus scan 
request. 

56. The computer system of claim 55, wherein the virus scanning process further causes the 
processor to select a one of the virus scan requests from the queue. 

57. The computer system of claim 56, wherein the selection is based on the priority order. 

58. The computer system of claim 56, wherein the selection is based on the characteristic of 
the virus scan request. 
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59. The computer system of claim 56, wherein the virus scanning process further causes the 
processor to scan the object of the selected virus scan request. 

60. The computer system of claim 55, wherein the characteristic includes at least one of an 
identity of the user triggering the virus scan request, a type of the process accessing the object of 
the virus scan request, a file extension of the object of the virus scan request, a time stamp of 
when the virus scan request was received, and an indication of whether the object is being 
accessed from a server console or from a network client. 
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